United States of America: Rejected Consumer Data Protection Act (SB 2428)

On 5 May 2022, the Consumer Data Protection Act (SB 2428) was rejected as it did not advance before the end of the legislative season. The Bill would introduce requirements regarding personal data collection and processing and establish the consumers' rights to correct and delete their data. Moreover, the Bill would introduce the right to data portability and require data controllers to adopt the principle of data minimisation and undertake data protection assessments.